=== RUN kuttl harness.go:460: starting setup harness.go:258: running tests using configured kubeconfig. harness.go:281: Successful connection to cluster at: https://136.114.185.238 harness.go:366: running tests harness.go:77: going to run test suite with timeout of 600 seconds for each step harness.go:378: testsuite: e2e-tests/tests has 56 tests === RUN kuttl/harness === RUN kuttl/harness/pg-tde-wal-encrypt === PAUSE kuttl/harness/pg-tde-wal-encrypt === CONT kuttl/harness/pg-tde-wal-encrypt logger.go:42: 13:24:22 | pg-tde-wal-encrypt | Creating namespace "kuttl-test-tight-lacewing" logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | starting test step 0-deploy-operator logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | running command: [sh -c set -o errexit set -o xtrace source ../../functions init_temp_dir # do this only in the first TestStep deploy_operator deploy_client] logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | + source ../../functions logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ realpath ../../.. logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776 logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | ++ CERT_MANAGER_VER=1.20.2 logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | ++ CHAOS_MESH_VER=2.5.1 logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | ++ BUSYBOX_VER=1.36 logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | ++++ pwd logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | ++ test_name=pg-tde-wal-encrypt logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/vars.sh logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776 logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776 logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/deploy logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/deploy logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/conf logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/conf logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ export TEMP_DIR=/tmp/kuttl/pg/pg-tde-wal-encrypt logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ TEMP_DIR=/tmp/kuttl/pg/pg-tde-wal-encrypt logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | ++++ git rev-parse --abbrev-ref HEAD logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ export GIT_BRANCH=PR-1776 logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ GIT_BRANCH=PR-1776 logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ export VERSION=PR-1776-9e4986606 logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ VERSION=PR-1776-9e4986606 logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ export SKIP_TEST_WARNINGS=true logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ SKIP_TEST_WARNINGS=true logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ export K8S_UPGRADE_PLATFORM=gke logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ K8S_UPGRADE_PLATFORM=gke logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ export K8S_UPGRADE_REGION=us-central1-a logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ K8S_UPGRADE_REGION=us-central1-a logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ export K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ export K8S_UPGRADE_FINAL_VERSION= logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ K8S_UPGRADE_FINAL_VERSION= logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ -z '' ]] logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | ++++ detect_k8s_platform logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | ++++ local detected_platform logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | ++++ local xtrace_enabled=false logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | ++++ [[ -o xtrace ]] logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | ++++ xtrace_enabled=true logger.go:42: 13:24:22 | pg-tde-wal-encrypt/0-deploy-operator | ++++ set +o xtrace logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ PLATFORM=gke logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export PLATFORM logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ ! -n '' ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ -n '' ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export PG_VER=18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ PG_VER=18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export PG_DISTRIBUTION= logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ PG_DISTRIBUTION= logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ '' == community ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export BUCKET=pg-operator-testing logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ BUCKET=pg-operator-testing logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export PMM_SERVER_VERSION=9.9.9 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ PMM_SERVER_VERSION=9.9.9 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export PGOV1_TAG=1.4.0 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ PGOV1_TAG=1.4.0 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export PGOV1_VER=14 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ PGOV1_VER=14 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export CPGO_VERSION=5.8.7 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ CPGO_VERSION=5.8.7 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export MINIO_VER=5.4.0 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ MINIO_VER=5.4.0 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export VAULT_VER=0.32.0 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ VAULT_VER=0.32.0 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export REGISTRY_NAME=docker.io logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ REGISTRY_NAME=docker.io logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export REGISTRY_NAME_FULL=docker.io/ logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ REGISTRY_NAME_FULL=docker.io/ logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | ++++ printenv logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | ++++ grep -E '^IMAGE' logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | ++++ awk -F= '{print $1}' logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | ++++ eval 'echo $IMAGE_BACKREST' logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | ++++ eval 'echo $IMAGE' logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:PR-1776-9e4986606 == docker.io/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:PR-1776-9e4986606 == percona/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:PR-1776-9e4986606 == perconalab/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | ++++ eval 'echo $IMAGE_UPGRADE' logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | ++++ eval 'echo $IMAGE_LOGCOLLECTOR' logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++++ echo perconalab/fluentbit:main-logcollector logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ var_value=perconalab/fluentbit:main-logcollector logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | ++++ eval 'echo $IMAGE_BASE' logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator == percona/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | ++++ eval 'echo $IMAGE_PGBOUNCER' logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | ++++ eval 'echo $IMAGE_POSTGRESQL' logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | ++++ eval 'echo $IMAGE_PMM_SERVER' logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++++ echo perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ var_value=perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | ++++ eval 'echo $IMAGE_PMM_CLIENT' logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++++ echo perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ var_value=perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]] logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | ++++ which gdate logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | ++++ which date logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ date=/usr/sbin/date logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | ++++ which gsed logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | ++++ which sed logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | +++ sed=/usr/sbin/sed logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | + init_temp_dir logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | + rm -rf /tmp/kuttl/pg/pg-tde-wal-encrypt logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | + mkdir -p /tmp/kuttl/pg/pg-tde-wal-encrypt logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | + deploy_operator logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | + local cw_prefix= logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | + destroy_operator logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | + kubectl -n pg-operator delete deployment percona-postgresql-operator --force --grace-period=0 logger.go:42: 13:24:24 | pg-tde-wal-encrypt/0-deploy-operator | Warning: Immediate deletion does not wait for confirmation that the running resource has been terminated. The resource may continue to run on the cluster indefinitely. logger.go:42: 13:24:25 | pg-tde-wal-encrypt/0-deploy-operator | deployment.apps "percona-postgresql-operator" force deleted from pg-operator namespace logger.go:42: 13:24:25 | pg-tde-wal-encrypt/0-deploy-operator | + [[ -n pg-operator ]] logger.go:42: 13:24:25 | pg-tde-wal-encrypt/0-deploy-operator | + kubectl delete namespace pg-operator --force --grace-period=0 logger.go:42: 13:24:25 | pg-tde-wal-encrypt/0-deploy-operator | Warning: Immediate deletion does not wait for confirmation that the running resource has been terminated. The resource may continue to run on the cluster indefinitely. logger.go:42: 13:24:25 | pg-tde-wal-encrypt/0-deploy-operator | namespace "pg-operator" force deleted logger.go:42: 13:24:37 | pg-tde-wal-encrypt/0-deploy-operator | + [[ -n pg-operator ]] logger.go:42: 13:24:37 | pg-tde-wal-encrypt/0-deploy-operator | + create_namespace pg-operator logger.go:42: 13:24:37 | pg-tde-wal-encrypt/0-deploy-operator | + local namespace=pg-operator logger.go:42: 13:24:37 | pg-tde-wal-encrypt/0-deploy-operator | + [[ gke == openshift ]] logger.go:42: 13:24:37 | pg-tde-wal-encrypt/0-deploy-operator | + kubectl delete namespace pg-operator --ignore-not-found logger.go:42: 13:24:38 | pg-tde-wal-encrypt/0-deploy-operator | + kubectl wait --for=delete namespace pg-operator logger.go:42: 13:24:38 | pg-tde-wal-encrypt/0-deploy-operator | + kubectl create namespace pg-operator logger.go:42: 13:24:38 | pg-tde-wal-encrypt/0-deploy-operator | namespace/pg-operator created logger.go:42: 13:24:38 | pg-tde-wal-encrypt/0-deploy-operator | + cw_prefix=cw- logger.go:42: 13:24:38 | pg-tde-wal-encrypt/0-deploy-operator | + kubectl -n pg-operator apply --server-side --force-conflicts -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/deploy/crd.yaml logger.go:42: 13:24:39 | pg-tde-wal-encrypt/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/crunchybridgeclusters.upstream.pgv2.percona.com serverside-applied logger.go:42: 13:24:40 | pg-tde-wal-encrypt/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/perconapgbackups.pgv2.percona.com serverside-applied logger.go:42: 13:24:42 | pg-tde-wal-encrypt/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/perconapgclusters.pgv2.percona.com serverside-applied logger.go:42: 13:24:42 | pg-tde-wal-encrypt/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/perconapgrestores.pgv2.percona.com serverside-applied logger.go:42: 13:24:42 | pg-tde-wal-encrypt/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/perconapgupgrades.pgv2.percona.com serverside-applied logger.go:42: 13:24:42 | pg-tde-wal-encrypt/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/pgadmins.upstream.pgv2.percona.com serverside-applied logger.go:42: 13:24:42 | pg-tde-wal-encrypt/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/pgupgrades.upstream.pgv2.percona.com serverside-applied logger.go:42: 13:24:44 | pg-tde-wal-encrypt/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/postgresclusters.upstream.pgv2.percona.com serverside-applied logger.go:42: 13:24:44 | pg-tde-wal-encrypt/0-deploy-operator | + kubectl -n pg-operator apply --server-side --force-conflicts -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/deploy/cw-rbac.yaml logger.go:42: 13:24:45 | pg-tde-wal-encrypt/0-deploy-operator | serviceaccount/percona-postgresql-operator serverside-applied logger.go:42: 13:24:45 | pg-tde-wal-encrypt/0-deploy-operator | clusterrole.rbac.authorization.k8s.io/percona-postgresql-operator serverside-applied logger.go:42: 13:24:45 | pg-tde-wal-encrypt/0-deploy-operator | clusterrolebinding.rbac.authorization.k8s.io/percona-postgresql-operator serverside-applied logger.go:42: 13:24:45 | pg-tde-wal-encrypt/0-deploy-operator | + local disable_telemetry=true logger.go:42: 13:24:45 | pg-tde-wal-encrypt/0-deploy-operator | + '[' pg-tde-wal-encrypt == telemetry-transfer ']' logger.go:42: 13:24:45 | pg-tde-wal-encrypt/0-deploy-operator | + yq eval '.spec.template.spec.containers[0].image = "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606"' /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/deploy/cw-operator.yaml logger.go:42: 13:24:45 | pg-tde-wal-encrypt/0-deploy-operator | + yq eval '(.spec.template.spec.containers[] | select(.name=="operator") | .env[] | select(.name=="DISABLE_TELEMETRY") | .value) = "true"' - logger.go:42: 13:24:45 | pg-tde-wal-encrypt/0-deploy-operator | + yq eval '(.spec.template.spec.containers[] | select(.name=="operator") | .env[] | select(.name=="LOG_LEVEL") | .value) = "DEBUG"' - logger.go:42: 13:24:45 | pg-tde-wal-encrypt/0-deploy-operator | + yq eval '(.spec.template.spec.containers[] | select(.name=="operator") | .env[] | select(.name=="PGO_FEATURE_GATES") | .value) = ""' - logger.go:42: 13:24:45 | pg-tde-wal-encrypt/0-deploy-operator | + kubectl -n pg-operator apply -f - logger.go:42: 13:24:46 | pg-tde-wal-encrypt/0-deploy-operator | deployment.apps/percona-postgresql-operator created logger.go:42: 13:24:46 | pg-tde-wal-encrypt/0-deploy-operator | + deploy_client logger.go:42: 13:24:46 | pg-tde-wal-encrypt/0-deploy-operator | + kubectl -n kuttl-test-tight-lacewing apply -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/conf/client.yaml logger.go:42: 13:24:47 | pg-tde-wal-encrypt/0-deploy-operator | deployment.apps/pg-client created logger.go:42: 13:24:48 | pg-tde-wal-encrypt/0-deploy-operator | running command: [sh -c kubectl assert exist-enhanced deployment percona-postgresql-operator -n ${OPERATOR_NS:-$NAMESPACE} --field-selector status.readyReplicas=1] logger.go:42: 13:24:48 | pg-tde-wal-encrypt/0-deploy-operator | ASSERT deployment percona-postgresql-operator matching field criteria 'status.readyReplicas=1' should exist. logger.go:42: 13:24:48 | pg-tde-wal-encrypt/0-deploy-operator | ASSERT FAIL Resource(s) not found. logger.go:42: 13:24:50 | pg-tde-wal-encrypt/0-deploy-operator | running command: [sh -c kubectl assert exist-enhanced deployment percona-postgresql-operator -n ${OPERATOR_NS:-$NAMESPACE} --field-selector status.readyReplicas=1] logger.go:42: 13:24:50 | pg-tde-wal-encrypt/0-deploy-operator | ASSERT deployment percona-postgresql-operator matching field criteria 'status.readyReplicas=1' should exist. logger.go:42: 13:24:50 | pg-tde-wal-encrypt/0-deploy-operator | ASSERT FAIL Resource(s) not found. logger.go:42: 13:24:52 | pg-tde-wal-encrypt/0-deploy-operator | running command: [sh -c kubectl assert exist-enhanced deployment percona-postgresql-operator -n ${OPERATOR_NS:-$NAMESPACE} --field-selector status.readyReplicas=1] logger.go:42: 13:24:52 | pg-tde-wal-encrypt/0-deploy-operator | ASSERT deployment percona-postgresql-operator matching field criteria 'status.readyReplicas=1' should exist. logger.go:42: 13:24:52 | pg-tde-wal-encrypt/0-deploy-operator | ASSERT FAIL Resource(s) not found. logger.go:42: 13:24:54 | pg-tde-wal-encrypt/0-deploy-operator | running command: [sh -c kubectl assert exist-enhanced deployment percona-postgresql-operator -n ${OPERATOR_NS:-$NAMESPACE} --field-selector status.readyReplicas=1] logger.go:42: 13:24:54 | pg-tde-wal-encrypt/0-deploy-operator | ASSERT deployment percona-postgresql-operator matching field criteria 'status.readyReplicas=1' should exist. logger.go:42: 13:24:54 | pg-tde-wal-encrypt/0-deploy-operator | INFO Found 1 resource(s). logger.go:42: 13:24:54 | pg-tde-wal-encrypt/0-deploy-operator | NAME NAMESPACE COL0 logger.go:42: 13:24:54 | pg-tde-wal-encrypt/0-deploy-operator | percona-postgresql-operator pg-operator 1 logger.go:42: 13:24:54 | pg-tde-wal-encrypt/0-deploy-operator | ASSERT PASS logger.go:42: 13:24:54 | pg-tde-wal-encrypt/0-deploy-operator | test step completed 0-deploy-operator logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | starting test step 1-deploy-vault logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | running command: [sh -c set -o errexit set -o xtrace source ../../functions start_vault vault-service https] logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | + source ../../functions logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ realpath ../../.. logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776 logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | ++ CERT_MANAGER_VER=1.20.2 logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | ++ CHAOS_MESH_VER=2.5.1 logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | ++ BUSYBOX_VER=1.36 logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | ++++ pwd logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | ++ test_name=pg-tde-wal-encrypt logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/vars.sh logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776 logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776 logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/deploy logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/deploy logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/conf logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/conf logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ export TEMP_DIR=/tmp/kuttl/pg/pg-tde-wal-encrypt logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ TEMP_DIR=/tmp/kuttl/pg/pg-tde-wal-encrypt logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | ++++ git rev-parse --abbrev-ref HEAD logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ export GIT_BRANCH=PR-1776 logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ GIT_BRANCH=PR-1776 logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ export VERSION=PR-1776-9e4986606 logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ VERSION=PR-1776-9e4986606 logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ export SKIP_TEST_WARNINGS=true logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ SKIP_TEST_WARNINGS=true logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ export K8S_UPGRADE_PLATFORM=gke logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ K8S_UPGRADE_PLATFORM=gke logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ export K8S_UPGRADE_REGION=us-central1-a logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ K8S_UPGRADE_REGION=us-central1-a logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ export K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ export K8S_UPGRADE_FINAL_VERSION= logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ K8S_UPGRADE_FINAL_VERSION= logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ -z '' ]] logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | ++++ detect_k8s_platform logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | ++++ local detected_platform logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | ++++ local xtrace_enabled=false logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | ++++ [[ -o xtrace ]] logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | ++++ xtrace_enabled=true logger.go:42: 13:24:54 | pg-tde-wal-encrypt/1-deploy-vault | ++++ set +o xtrace logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ PLATFORM=gke logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export PLATFORM logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ ! -n '' ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ -n '' ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export PG_VER=18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ PG_VER=18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export PG_DISTRIBUTION= logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ PG_DISTRIBUTION= logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ '' == community ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export BUCKET=pg-operator-testing logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ BUCKET=pg-operator-testing logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export PMM_SERVER_VERSION=9.9.9 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ PMM_SERVER_VERSION=9.9.9 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export PGOV1_TAG=1.4.0 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ PGOV1_TAG=1.4.0 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export PGOV1_VER=14 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ PGOV1_VER=14 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export CPGO_VERSION=5.8.7 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ CPGO_VERSION=5.8.7 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export MINIO_VER=5.4.0 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ MINIO_VER=5.4.0 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export VAULT_VER=0.32.0 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ VAULT_VER=0.32.0 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export REGISTRY_NAME=docker.io logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ REGISTRY_NAME=docker.io logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export REGISTRY_NAME_FULL=docker.io/ logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ REGISTRY_NAME_FULL=docker.io/ logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | ++++ grep -E '^IMAGE' logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | ++++ printenv logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | ++++ awk -F= '{print $1}' logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | ++++ eval 'echo $IMAGE_BACKREST' logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | ++++ eval 'echo $IMAGE' logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++++ echo perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ var_value=perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:PR-1776-9e4986606 == docker.io/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:PR-1776-9e4986606 == percona/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:PR-1776-9e4986606 == perconalab/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | ++++ eval 'echo $IMAGE_UPGRADE' logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++++ echo perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | ++++ eval 'echo $IMAGE_LOGCOLLECTOR' logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++++ echo perconalab/fluentbit:main-logcollector logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ var_value=perconalab/fluentbit:main-logcollector logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | ++++ eval 'echo $IMAGE_BASE' logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++++ echo perconalab/percona-postgresql-operator logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ var_value=perconalab/percona-postgresql-operator logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator == percona/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ new_value=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | ++++ eval 'echo $IMAGE_PGBOUNCER' logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | ++++ eval 'echo $IMAGE_POSTGRESQL' logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | ++++ eval 'echo $IMAGE_PMM_SERVER' logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++++ echo perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ var_value=perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | ++++ eval 'echo $IMAGE_PMM_CLIENT' logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++++ echo perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ var_value=perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | ++++ which gdate logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | ++++ which date logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ date=/usr/sbin/date logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | ++++ which gsed logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | ++++ which sed logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | +++ sed=/usr/sbin/sed logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | + start_vault vault-service https logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | + local name=vault-service logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | + local protocol=https logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | + local platform=kubernetes logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | ++ mktemp -d logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | + local tmp_dir=/tmp/tmp.Ikuf3doqXa logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | + [[ gke == openshift ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | + create_namespace vault-service skip_clean logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | + local namespace=vault-service logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | + [[ gke == openshift ]] logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | + kubectl delete namespace vault-service --ignore-not-found logger.go:42: 13:24:56 | pg-tde-wal-encrypt/1-deploy-vault | namespace "vault-service" deleted logger.go:42: 13:25:18 | pg-tde-wal-encrypt/1-deploy-vault | + kubectl wait --for=delete namespace vault-service logger.go:42: 13:25:18 | pg-tde-wal-encrypt/1-deploy-vault | + kubectl create namespace vault-service logger.go:42: 13:25:19 | pg-tde-wal-encrypt/1-deploy-vault | namespace/vault-service created logger.go:42: 13:25:19 | pg-tde-wal-encrypt/1-deploy-vault | + helm repo add hashicorp https://helm.releases.hashicorp.com logger.go:42: 13:25:19 | pg-tde-wal-encrypt/1-deploy-vault | "hashicorp" already exists with the same configuration, skipping logger.go:42: 13:25:19 | pg-tde-wal-encrypt/1-deploy-vault | + helm uninstall vault-service logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | Error: uninstall: Release not loaded: vault-service: release: not found logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + : logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + echo 'install Vault vault-service' logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | install Vault vault-service logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + local values_file=/tmp/tmp.Ikuf3doqXa/vault.values.yaml logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + local values_template=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/conf/vault-values-no-tls.yaml logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + [[ https == https ]] logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + vault_tls vault-service /tmp/tmp.Ikuf3doqXa logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + local name=vault-service logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + local tmp_dir=/tmp/tmp.Ikuf3doqXa logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + local service=vault-service logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + local namespace=vault-service logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + local secret_name=vault-service logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + local csr_name=vault-csr-32521 logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + local csr_signer logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + case ${PLATFORM} in logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + csr_signer=kubernetes.io/kubelet-serving logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + openssl genrsa -out /tmp/tmp.Ikuf3doqXa/vault.key 2048 logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + sed -e 's//vault-service/g' -e 's//vault-service/g' /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/conf/vault-csr.conf logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + openssl req -new -key /tmp/tmp.Ikuf3doqXa/vault.key -subj '/CN=system:node:vault-service.vault-service.svc;/O=system:nodes' -out /tmp/tmp.Ikuf3doqXa/server.csr -config /tmp/tmp.Ikuf3doqXa/csr.conf logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + CSR_NAME=vault-csr-32521 logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | ++ base64 logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | ++ tr -d '\n' logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + CSR_REQUEST=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 logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + CSR_SIGNER=kubernetes.io/kubelet-serving logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + yq $'.metadata.name = strenv(CSR_NAME) |\n\t\t\t .spec.request = strenv(CSR_REQUEST) |\n\t\t\t .spec.signerName = strenv(CSR_SIGNER)' /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/conf/vault-csr.yaml logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + kubectl delete csr vault-csr-32521 --ignore-not-found logger.go:42: 13:25:20 | pg-tde-wal-encrypt/1-deploy-vault | + kubectl create -f /tmp/tmp.Ikuf3doqXa/csr.yaml logger.go:42: 13:25:21 | pg-tde-wal-encrypt/1-deploy-vault | certificatesigningrequest.certificates.k8s.io/vault-csr-32521 created logger.go:42: 13:25:21 | pg-tde-wal-encrypt/1-deploy-vault | + sleep 10 logger.go:42: 13:25:31 | pg-tde-wal-encrypt/1-deploy-vault | + kubectl certificate approve vault-csr-32521 logger.go:42: 13:25:32 | pg-tde-wal-encrypt/1-deploy-vault | certificatesigningrequest.certificates.k8s.io/vault-csr-32521 approved logger.go:42: 13:25:32 | pg-tde-wal-encrypt/1-deploy-vault | + kubectl get csr vault-csr-32521 -o 'jsonpath={.status.certificate}' logger.go:42: 13:25:32 | pg-tde-wal-encrypt/1-deploy-vault | + openssl base64 -in /tmp/tmp.Ikuf3doqXa/serverCert -d -A -out /tmp/tmp.Ikuf3doqXa/vault.crt logger.go:42: 13:25:32 | pg-tde-wal-encrypt/1-deploy-vault | + kubectl config view --raw --minify --flatten -o 'jsonpath={.clusters[].cluster.certificate-authority-data}' logger.go:42: 13:25:32 | pg-tde-wal-encrypt/1-deploy-vault | + base64 -d logger.go:42: 13:25:32 | pg-tde-wal-encrypt/1-deploy-vault | + [[ gke == openshift ]] logger.go:42: 13:25:32 | pg-tde-wal-encrypt/1-deploy-vault | + kubectl create secret generic vault-service --namespace vault-service --from-file=vault.key=/tmp/tmp.Ikuf3doqXa/vault.key --from-file=vault.crt=/tmp/tmp.Ikuf3doqXa/vault.crt --from-file=vault.ca=/tmp/tmp.Ikuf3doqXa/vault.ca logger.go:42: 13:25:33 | pg-tde-wal-encrypt/1-deploy-vault | secret/vault-service created logger.go:42: 13:25:33 | pg-tde-wal-encrypt/1-deploy-vault | + values_template=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/conf/vault-values-tls.yaml logger.go:42: 13:25:33 | pg-tde-wal-encrypt/1-deploy-vault | + sed -e 's//vault-service/g' -e 's//kubernetes/g' /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/conf/vault-values-tls.yaml logger.go:42: 13:25:33 | pg-tde-wal-encrypt/1-deploy-vault | + helm install vault-service hashicorp/vault --disable-openapi-validation --version 0.32.0 --namespace vault-service --values /tmp/tmp.Ikuf3doqXa/vault.values.yaml logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | NAME: vault-service logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | LAST DEPLOYED: Mon Aug 31 13:25:34 2026 logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | NAMESPACE: vault-service logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | STATUS: deployed logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | REVISION: 1 logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | NOTES: logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | Thank you for installing HashiCorp Vault! logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | Now that you have deployed Vault, you should look over the docs on using logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | Vault with Kubernetes available here: logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | https://developer.hashicorp.com/vault/docs logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | Your release is named vault-service. To learn more about the release, try: logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | $ helm status vault-service logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | $ helm get manifest vault-service logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | + [[ gke == openshift ]] logger.go:42: 13:25:40 | pg-tde-wal-encrypt/1-deploy-vault | + set +o xtrace logger.go:42: 13:25:49 | pg-tde-wal-encrypt/1-deploy-vault | pod/vault-service-0.....{"running":{"startedAt":"2026-08-31T13:25:47Z"}} logger.go:42: 13:25:49 | pg-tde-wal-encrypt/1-deploy-vault | Unable to use a TTY - input is not a terminal or the right kind of file logger.go:42: 13:26:00 | pg-tde-wal-encrypt/1-deploy-vault | Unable to use a TTY - input is not a terminal or the right kind of file logger.go:42: 13:26:01 | pg-tde-wal-encrypt/1-deploy-vault | Key Value logger.go:42: 13:26:01 | pg-tde-wal-encrypt/1-deploy-vault | --- ----- logger.go:42: 13:26:01 | pg-tde-wal-encrypt/1-deploy-vault | Seal Type shamir logger.go:42: 13:26:01 | pg-tde-wal-encrypt/1-deploy-vault | Initialized true logger.go:42: 13:26:01 | pg-tde-wal-encrypt/1-deploy-vault | Sealed false logger.go:42: 13:26:01 | pg-tde-wal-encrypt/1-deploy-vault | Total Shares 1 logger.go:42: 13:26:01 | pg-tde-wal-encrypt/1-deploy-vault | Threshold 1 logger.go:42: 13:26:01 | pg-tde-wal-encrypt/1-deploy-vault | Version 1.21.2 logger.go:42: 13:26:01 | pg-tde-wal-encrypt/1-deploy-vault | Build Date 2026-01-06T08:33:05Z logger.go:42: 13:26:01 | pg-tde-wal-encrypt/1-deploy-vault | Storage Type file logger.go:42: 13:26:01 | pg-tde-wal-encrypt/1-deploy-vault | Cluster Name vault-cluster-d6e568eb logger.go:42: 13:26:01 | pg-tde-wal-encrypt/1-deploy-vault | Cluster ID 1a7523b1-aa3d-327b-1fe1-fae8316b5692 logger.go:42: 13:26:01 | pg-tde-wal-encrypt/1-deploy-vault | HA Enabled false logger.go:42: 13:26:02 | pg-tde-wal-encrypt/1-deploy-vault | Unable to use a TTY - input is not a terminal or the right kind of file logger.go:42: 13:26:02 | pg-tde-wal-encrypt/1-deploy-vault | Success! Enabled the kv secrets engine at: tde/ logger.go:42: 13:26:02 | pg-tde-wal-encrypt/1-deploy-vault | Success! Enabled the file audit device at: file/ logger.go:42: 13:26:13 | pg-tde-wal-encrypt/1-deploy-vault | secret/vault-secret created logger.go:42: 13:26:13 | pg-tde-wal-encrypt/1-deploy-vault | test step completed 1-deploy-vault logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | starting test step 2-create-cluster logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c set -o errexit set -o xtrace source ../../functions get_cr \ | yq '.spec.extensions.pg_tde.enabled = true' \ | yq '.spec.extensions.pg_tde.vault.host = "https://vault-service.vault-service.svc:8200"' \ | yq '.spec.extensions.pg_tde.vault.mountPath = "tde"' \ | yq '.spec.extensions.pg_tde.vault.tokenSecret.name = "vault-secret"' \ | yq '.spec.extensions.pg_tde.vault.tokenSecret.key = "token"' \ | yq '.spec.extensions.pg_tde.vault.caSecret.name = "vault-secret"' \ | yq '.spec.extensions.pg_tde.vault.caSecret.key = "ca.crt"' \ | kubectl -n "${NAMESPACE}" apply -f -] logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | + source ../../functions logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ realpath ../../.. logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776 logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | ++ CERT_MANAGER_VER=1.20.2 logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | ++ CHAOS_MESH_VER=2.5.1 logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | ++ BUSYBOX_VER=1.36 logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | ++++ pwd logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | ++ test_name=pg-tde-wal-encrypt logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/vars.sh logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776 logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776 logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/deploy logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/deploy logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/conf logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/conf logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ export TEMP_DIR=/tmp/kuttl/pg/pg-tde-wal-encrypt logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ TEMP_DIR=/tmp/kuttl/pg/pg-tde-wal-encrypt logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | ++++ git rev-parse --abbrev-ref HEAD logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ export GIT_BRANCH=PR-1776 logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ GIT_BRANCH=PR-1776 logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ export VERSION=PR-1776-9e4986606 logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ VERSION=PR-1776-9e4986606 logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ export SKIP_TEST_WARNINGS=true logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ SKIP_TEST_WARNINGS=true logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ export K8S_UPGRADE_PLATFORM=gke logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ K8S_UPGRADE_PLATFORM=gke logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ export K8S_UPGRADE_REGION=us-central1-a logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ K8S_UPGRADE_REGION=us-central1-a logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ export K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ export K8S_UPGRADE_FINAL_VERSION= logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ K8S_UPGRADE_FINAL_VERSION= logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ -z '' ]] logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | ++++ detect_k8s_platform logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | ++++ local detected_platform logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | ++++ local xtrace_enabled=false logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | ++++ [[ -o xtrace ]] logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | ++++ xtrace_enabled=true logger.go:42: 13:26:13 | pg-tde-wal-encrypt/2-create-cluster | ++++ set +o xtrace logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ PLATFORM=gke logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export PLATFORM logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ ! -n '' ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ -n '' ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export PG_VER=18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ PG_VER=18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export PG_DISTRIBUTION= logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ PG_DISTRIBUTION= logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ '' == community ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export BUCKET=pg-operator-testing logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ BUCKET=pg-operator-testing logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export PMM_SERVER_VERSION=9.9.9 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ PMM_SERVER_VERSION=9.9.9 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export PGOV1_TAG=1.4.0 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ PGOV1_TAG=1.4.0 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export PGOV1_VER=14 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ PGOV1_VER=14 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export CPGO_VERSION=5.8.7 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ CPGO_VERSION=5.8.7 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export MINIO_VER=5.4.0 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ MINIO_VER=5.4.0 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export VAULT_VER=0.32.0 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ VAULT_VER=0.32.0 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export REGISTRY_NAME=docker.io logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ REGISTRY_NAME=docker.io logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export REGISTRY_NAME_FULL=docker.io/ logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ REGISTRY_NAME_FULL=docker.io/ logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | ++++ printenv logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | ++++ grep -E '^IMAGE' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | ++++ awk -F= '{print $1}' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | ++++ eval 'echo $IMAGE_BACKREST' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | ++++ eval 'echo $IMAGE' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++++ echo perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1776-9e4986606 == docker.io/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1776-9e4986606 == percona/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1776-9e4986606 == perconalab/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | ++++ eval 'echo $IMAGE_UPGRADE' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++++ echo perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | ++++ eval 'echo $IMAGE_LOGCOLLECTOR' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++++ echo perconalab/fluentbit:main-logcollector logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ var_value=perconalab/fluentbit:main-logcollector logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | ++++ eval 'echo $IMAGE_BASE' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++++ echo perconalab/percona-postgresql-operator logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ var_value=perconalab/percona-postgresql-operator logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator == percona/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | ++++ eval 'echo $IMAGE_PGBOUNCER' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | ++++ eval 'echo $IMAGE_POSTGRESQL' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | ++++ eval 'echo $IMAGE_PMM_SERVER' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++++ echo perconalab/pmm-server:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ var_value=perconalab/pmm-server:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | ++++ eval 'echo $IMAGE_PMM_CLIENT' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++++ echo perconalab/pmm-client:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ var_value=perconalab/pmm-client:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | ++++ which gdate logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | ++++ which date logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ date=/usr/sbin/date logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | ++++ which gsed logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | ++++ which sed logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | +++ sed=/usr/sbin/sed logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + get_cr logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + local cr_name=pg-tde-wal-encrypt logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + local repo_path= logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + local source_path= logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + local platform=gke logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + local cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf/pg-tde-wal-encrypt.yaml logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + local platform_cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf/pg-tde-wal-encrypt-gke.yaml logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + local spaces_cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf/pg-tde-wal-encrypt-spaces.yaml logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + [[ -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf/pg-tde-wal-encrypt-gke.yaml ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + [[ gke == doks ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + crs=('/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/deploy/cr.yaml') logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + local crs logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + yq '.spec.extensions.pg_tde.enabled = true' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + [[ -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf/pg-tde-wal-encrypt.yaml ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + yq eval-all $'\n\t\tselect(fileIndex == 0) * (select(fileIndex == 1) // {}) |\n\t\t.metadata.name = "pg-tde-wal-encrypt" |\n\t\t.metadata.labels = {"e2e":"pg-tde-wal-encrypt"} |\n\t\t.spec.postgresVersion = 18 |\n\t\t.spec.users += [{"name":"postgres","password":{"type":"AlphaNumeric"}}] |\n\t\t.spec.users += [{"name":"pg-tde-wal-encrypt","password":{"type":"AlphaNumeric"}}] |\n\t\t.spec.image = "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" |\n\t\t.spec.initContainer.image = "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" |\n\t\t.spec.backups.pgbackrest.image = "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" |\n\t\t.spec.proxy.pgBouncer.image = "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" |\n\t\t.spec.logcollector.image = "docker.io/perconalab/fluentbit:main-logcollector" |\n\t\t.spec.pmm.image = "docker.io/perconalab/pmm-client:3-dev-latest" |\n\t\t.spec.pmm.secret = "pg-tde-wal-encrypt-pmm-secret" |\n\t\t.spec.pmm.customClusterName = "pg-tde-wal-encrypt-pmm-custom-name" |\n\t\t.spec.pmm.postgresParams = "--environment=dev-postgres"\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/deploy/cr.yaml logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + yq '.spec.extensions.pg_tde.vault.host = "https://vault-service.vault-service.svc:8200"' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + yq '.spec.extensions.pg_tde.vault.mountPath = "tde"' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + yq '.spec.extensions.pg_tde.vault.tokenSecret.name = "vault-secret"' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + yq '.spec.extensions.pg_tde.vault.tokenSecret.key = "token"' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + yq '.spec.extensions.pg_tde.vault.caSecret.name = "vault-secret"' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + kubectl -n kuttl-test-tight-lacewing apply -f - logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + yq '.spec.extensions.pg_tde.vault.caSecret.key = "ca.crt"' logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + /usr/sbin/sed -i 's|||g' /tmp/kuttl/pg/pg-tde-wal-encrypt/cr.yaml logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + /usr/sbin/sed -i 's|||g' /tmp/kuttl/pg/pg-tde-wal-encrypt/cr.yaml logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + /usr/sbin/sed -i 's||pg-operator-testing|g' /tmp/kuttl/pg/pg-tde-wal-encrypt/cr.yaml logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + /usr/sbin/sed -i 's||docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606|g' /tmp/kuttl/pg/pg-tde-wal-encrypt/cr.yaml logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + [[ gke == openshift ]] logger.go:42: 13:26:15 | pg-tde-wal-encrypt/2-create-cluster | + cat /tmp/kuttl/pg/pg-tde-wal-encrypt/cr.yaml logger.go:42: 13:26:17 | pg-tde-wal-encrypt/2-create-cluster | perconapgcluster.pgv2.percona.com/pg-tde-wal-encrypt created logger.go:42: 13:26:18 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:26:20 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:26:23 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:26:25 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:26:27 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:26:30 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:26:32 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:26:34 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:26:37 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:26:39 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:26:41 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:26:44 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:26:46 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:26:48 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:26:50 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:26:53 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:26:55 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:26:57 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:00 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:02 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:04 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:06 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:09 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:11 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:13 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:16 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:18 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:20 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:22 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:25 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:27 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:29 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:32 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:34 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:36 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:38 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:41 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:43 | pg-tde-wal-encrypt/2-create-cluster | running command: [sh -c tmp_file=$(mktemp) kubectl -n $NAMESPACE get pg pg-tde-wal-encrypt -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file} [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]] [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]] [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]] [[ $(cat ${tmp_file} | yq .status) == "True" ]] ] logger.go:42: 13:27:44 | pg-tde-wal-encrypt/2-create-cluster | test step completed 2-create-cluster logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | starting test step 3-enable-wal-encryption logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c set -o errexit set -o xtrace source ../../functions get_cr \ | yq '.spec.extensions.pg_tde.enabled = true' \ | yq '.spec.extensions.pg_tde.vault.host = "https://vault-service.vault-service.svc:8200"' \ | yq '.spec.extensions.pg_tde.vault.mountPath = "tde"' \ | yq '.spec.extensions.pg_tde.vault.tokenSecret.name = "vault-secret"' \ | yq '.spec.extensions.pg_tde.vault.tokenSecret.key = "token"' \ | yq '.spec.extensions.pg_tde.vault.caSecret.name = "vault-secret"' \ | yq '.spec.extensions.pg_tde.vault.caSecret.key = "ca.crt"' \ | yq '.spec.extensions.pg_tde.walEncryption = true' \ | kubectl -n "${NAMESPACE}" apply -f -] logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | + source ../../functions logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ realpath ../../.. logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776 logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++ CERT_MANAGER_VER=1.20.2 logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++ CHAOS_MESH_VER=2.5.1 logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++ BUSYBOX_VER=1.36 logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ pwd logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++ test_name=pg-tde-wal-encrypt logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/vars.sh logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776 logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776 logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/deploy logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/deploy logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/conf logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/conf logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export TEMP_DIR=/tmp/kuttl/pg/pg-tde-wal-encrypt logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ TEMP_DIR=/tmp/kuttl/pg/pg-tde-wal-encrypt logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ git rev-parse --abbrev-ref HEAD logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export GIT_BRANCH=PR-1776 logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ GIT_BRANCH=PR-1776 logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export VERSION=PR-1776-9e4986606 logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ VERSION=PR-1776-9e4986606 logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export SKIP_TEST_WARNINGS=true logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ SKIP_TEST_WARNINGS=true logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export K8S_UPGRADE_PLATFORM=gke logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ K8S_UPGRADE_PLATFORM=gke logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export K8S_UPGRADE_REGION=us-central1-a logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ K8S_UPGRADE_REGION=us-central1-a logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export K8S_UPGRADE_FINAL_VERSION= logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ K8S_UPGRADE_FINAL_VERSION= logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ -z '' ]] logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ detect_k8s_platform logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ local detected_platform logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ local xtrace_enabled=false logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ [[ -o xtrace ]] logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ xtrace_enabled=true logger.go:42: 13:27:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ set +o xtrace logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ PLATFORM=gke logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export PLATFORM logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ ! -n '' ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ -n '' ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export PG_VER=18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ PG_VER=18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export PG_DISTRIBUTION= logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ PG_DISTRIBUTION= logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ '' == community ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export BUCKET=pg-operator-testing logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ BUCKET=pg-operator-testing logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export PMM_SERVER_VERSION=9.9.9 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ PMM_SERVER_VERSION=9.9.9 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export PGOV1_TAG=1.4.0 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ PGOV1_TAG=1.4.0 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export PGOV1_VER=14 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ PGOV1_VER=14 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export CPGO_VERSION=5.8.7 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ CPGO_VERSION=5.8.7 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export MINIO_VER=5.4.0 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ MINIO_VER=5.4.0 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export VAULT_VER=0.32.0 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ VAULT_VER=0.32.0 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export REGISTRY_NAME=docker.io logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ REGISTRY_NAME=docker.io logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export REGISTRY_NAME_FULL=docker.io/ logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ REGISTRY_NAME_FULL=docker.io/ logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ printenv logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ grep -E '^IMAGE' logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ awk -F= '{print $1}' logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ eval 'echo $IMAGE_BACKREST' logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ eval 'echo $IMAGE' logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++++ echo perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ var_value=perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator:PR-1776-9e4986606 == docker.io/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator:PR-1776-9e4986606 == percona/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator:PR-1776-9e4986606 == perconalab/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ eval 'echo $IMAGE_UPGRADE' logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++++ echo perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ eval 'echo $IMAGE_LOGCOLLECTOR' logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++++ echo perconalab/fluentbit:main-logcollector logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ var_value=perconalab/fluentbit:main-logcollector logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ eval 'echo $IMAGE_BASE' logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++++ echo perconalab/percona-postgresql-operator logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ var_value=perconalab/percona-postgresql-operator logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator == percona/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ new_value=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ eval 'echo $IMAGE_PGBOUNCER' logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ eval 'echo $IMAGE_POSTGRESQL' logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ eval 'echo $IMAGE_PMM_SERVER' logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++++ echo perconalab/pmm-server:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ var_value=perconalab/pmm-server:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ eval 'echo $IMAGE_PMM_CLIENT' logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++++ echo perconalab/pmm-client:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ var_value=perconalab/pmm-client:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606 logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ which gdate logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ which date logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ date=/usr/sbin/date logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ which gsed logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | ++++ which sed logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | +++ sed=/usr/sbin/sed logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + get_cr logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + yq '.spec.extensions.pg_tde.enabled = true' logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + local cr_name=pg-tde-wal-encrypt logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + yq '.spec.extensions.pg_tde.vault.host = "https://vault-service.vault-service.svc:8200"' logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + local repo_path= logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + local source_path= logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + local platform=gke logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + local cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf/pg-tde-wal-encrypt.yaml logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + local platform_cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf/pg-tde-wal-encrypt-gke.yaml logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + local spaces_cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf/pg-tde-wal-encrypt-spaces.yaml logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + [[ -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf/pg-tde-wal-encrypt-gke.yaml ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + [[ gke == doks ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + crs=('/mnt/jenkins/workspace/cloud-pg-operator_PR-1776/deploy/cr.yaml') logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + local crs logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + [[ -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/e2e-tests/tests/pg-tde-wal-encrypt/conf/pg-tde-wal-encrypt.yaml ]] logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + yq '.spec.extensions.pg_tde.vault.mountPath = "tde"' logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + yq eval-all $'\n\t\tselect(fileIndex == 0) * (select(fileIndex == 1) // {}) |\n\t\t.metadata.name = "pg-tde-wal-encrypt" |\n\t\t.metadata.labels = {"e2e":"pg-tde-wal-encrypt"} |\n\t\t.spec.postgresVersion = 18 |\n\t\t.spec.users += [{"name":"postgres","password":{"type":"AlphaNumeric"}}] |\n\t\t.spec.users += [{"name":"pg-tde-wal-encrypt","password":{"type":"AlphaNumeric"}}] |\n\t\t.spec.image = "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" |\n\t\t.spec.initContainer.image = "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" |\n\t\t.spec.backups.pgbackrest.image = "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" |\n\t\t.spec.proxy.pgBouncer.image = "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" |\n\t\t.spec.logcollector.image = "docker.io/perconalab/fluentbit:main-logcollector" |\n\t\t.spec.pmm.image = "docker.io/perconalab/pmm-client:3-dev-latest" |\n\t\t.spec.pmm.secret = "pg-tde-wal-encrypt-pmm-secret" |\n\t\t.spec.pmm.customClusterName = "pg-tde-wal-encrypt-pmm-custom-name" |\n\t\t.spec.pmm.postgresParams = "--environment=dev-postgres"\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1776/deploy/cr.yaml logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + yq '.spec.extensions.pg_tde.vault.tokenSecret.name = "vault-secret"' logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + yq '.spec.extensions.pg_tde.vault.tokenSecret.key = "token"' logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + yq '.spec.extensions.pg_tde.vault.caSecret.name = "vault-secret"' logger.go:42: 13:27:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | + yq '.spec.extensions.pg_tde.vault.caSecret.key = "ca.crt"' logger.go:42: 13:27:46 | pg-tde-wal-encrypt/3-enable-wal-encryption | + yq '.spec.extensions.pg_tde.walEncryption = true' logger.go:42: 13:27:46 | pg-tde-wal-encrypt/3-enable-wal-encryption | + kubectl -n kuttl-test-tight-lacewing apply -f - logger.go:42: 13:27:46 | pg-tde-wal-encrypt/3-enable-wal-encryption | + /usr/sbin/sed -i 's|||g' /tmp/kuttl/pg/pg-tde-wal-encrypt/cr.yaml logger.go:42: 13:27:46 | pg-tde-wal-encrypt/3-enable-wal-encryption | + /usr/sbin/sed -i 's|||g' /tmp/kuttl/pg/pg-tde-wal-encrypt/cr.yaml logger.go:42: 13:27:46 | pg-tde-wal-encrypt/3-enable-wal-encryption | + /usr/sbin/sed -i 's||pg-operator-testing|g' /tmp/kuttl/pg/pg-tde-wal-encrypt/cr.yaml logger.go:42: 13:27:46 | pg-tde-wal-encrypt/3-enable-wal-encryption | + /usr/sbin/sed -i 's||docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606|g' /tmp/kuttl/pg/pg-tde-wal-encrypt/cr.yaml logger.go:42: 13:27:46 | pg-tde-wal-encrypt/3-enable-wal-encryption | + [[ gke == openshift ]] logger.go:42: 13:27:46 | pg-tde-wal-encrypt/3-enable-wal-encryption | + cat /tmp/kuttl/pg/pg-tde-wal-encrypt/cr.yaml logger.go:42: 13:27:50 | pg-tde-wal-encrypt/3-enable-wal-encryption | perconapgcluster.pgv2.percona.com/pg-tde-wal-encrypt configured logger.go:42: 13:27:50 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:27:53 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:27:54 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:27:56 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:27:57 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:28:00 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:28:01 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:28:04 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:28:05 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:28:07 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:28:08 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:28:11 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:28:12 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:28:14 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:28:16 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:28:18 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:28:19 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:28:22 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:28:23 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:28:25 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:28:26 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:28:29 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:28:30 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:28:32 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:28:34 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:28:36 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:28:37 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:28:40 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:28:41 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:28:43 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:28:44 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:28:47 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:28:48 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:28:50 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:28:51 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:28:54 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:28:55 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:28:57 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:28:59 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:29:01 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:29:02 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:29:05 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:29:06 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:29:08 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:29:09 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:29:12 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:29:13 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:29:16 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:29:17 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:29:19 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:29:20 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:29:23 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:29:24 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:29:27 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:29:28 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:29:30 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:29:31 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:29:34 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:29:35 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:29:37 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:29:39 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:29:41 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:29:42 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:29:45 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:29:46 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:29:48 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:29:49 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:29:52 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:29:53 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:29:55 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:29:56 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:29:59 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:30:00 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:30:03 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:30:04 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:30:06 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:30:07 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:30:10 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:30:11 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:30:14 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:30:15 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:30:17 | pg-tde-wal-encrypt/3-enable-wal-encryption | pg_tde.wal_encrypt is not enabled in pg-tde-wal-encrypt-instance1-8sds-0 logger.go:42: 13:30:18 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:30:22 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:30:23 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:30:27 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:30:28 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:30:32 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:30:33 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:30:37 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:30:38 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:30:42 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:30:43 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:30:47 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:30:48 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:30:52 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:30:53 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:30:57 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:30:58 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:31:02 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:31:03 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:31:07 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:31:08 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:31:12 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:31:14 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:31:17 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:31:19 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:31:22 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:31:23 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:31:27 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:31:28 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:31:32 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:31:33 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:31:37 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:31:38 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:31:42 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:31:43 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:31:47 | pg-tde-wal-encrypt/3-enable-wal-encryption | pod/pg-tde-wal-encrypt-instance1-8sds-0 is not annotated for WAL encryption: false logger.go:42: 13:31:48 | pg-tde-wal-encrypt/3-enable-wal-encryption | running command: [sh -c pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o jsonpath='{.spec.postgresVersion}') primary=$(kubectl -n $NAMESPACE get pods --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt -o jsonpath='{.items[].metadata.name}') if [[ $(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW pg_tde.wal_encrypt;') != "on" ]]; then echo "pg_tde.wal_encrypt is not enabled in ${primary}" exit 1 fi for pod in $(kubectl -n ${NAMESPACE} get pods -o name \ --selector=postgres-operator.crunchydata.com/cluster=pg-tde-wal-encrypt,postgres-operator.crunchydata.com/data=postgres); do annotation=$(kubectl -n ${NAMESPACE} get ${pod} -o yaml | yq '.metadata.annotations."pgv2.percona.com/tde-wal-encryption"') if [[ ${annotation} != "true" ]]; then echo "${pod} is not annotated for WAL encryption: ${annotation}" exit 1 fi target=$(kubectl -n ${NAMESPACE} exec ${pod} -c database -- readlink /pgdata/pg_tde) if [[ ${target} != "/pgdata/pg${pgversion}/pg_tde" ]]; then echo "${pod} does not link the pg_tde keyring: ${target}" exit 1 fi if ! kubectl -n ${NAMESPACE} exec ${pod} -c database -- test -d /pgdata/pg_tde; then echo "${pod} pg_tde keyring link does not resolve" exit 1 fi done archive_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW archive_command;') if [[ ${archive_command} != 'pg_tde_archive_decrypt %f %p "pgbackrest --stanza=db archive-push %%p"'* ]]; then echo "archive_command doesn't start with the pg_tde_archive_decrypt wrapper in ${primary}: ${archive_command}" exit 1 fi if [[ ${archive_command} != *'pg_tde_waldump'* ]]; then echo "archive_command doesn't use pg_tde_waldump in ${primary}: ${archive_command}" exit 1 fi restore_command=$(kubectl -n $NAMESPACE exec ${primary} -- psql -t -A -c 'SHOW restore_command;') if [[ ${restore_command} != *'pg_tde_restore_encrypt %f %p '* ]]; then echo "restore_command doesn't start with the pg_tde_restore_encrypt wrapper in ${primary}: ${restore_command}" exit 1 fi for key in pgbackrest_instance.conf pgbackrest_repo.conf; do conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."'"${key}"'"') if ! echo "${conf}" | grep -q '^checksum-page = n$'; then echo "no checksum-page in ${key}" exit 1 fi done instance_conf=$(kubectl get -n ${NAMESPACE} cm pg-tde-wal-encrypt-pgbackrest-config -o yaml | yq '.data."pgbackrest_instance.conf"') if ! echo "${instance_conf}" | grep -q '^archive-async = n$'; then echo "archive-async is not disabled in pgbackrest_instance.conf" exit 1 fi ] logger.go:42: 13:31:49 | pg-tde-wal-encrypt/3-enable-wal-encryption | test step failed 3-enable-wal-encryption case.go:328: failed in step 3-enable-wal-encryption case.go:330: --- PerconaPGCluster:kuttl-test-tight-lacewing/pg-tde-wal-encrypt +++ PerconaPGCluster:kuttl-test-tight-lacewing/pg-tde-wal-encrypt @@ -1,8 +1,32 @@ apiVersion: pgv2.percona.com/v2 kind: PerconaPGCluster metadata: + annotations: + kubectl.kubernetes.io/last-applied-configuration: | + {"apiVersion":"pgv2.percona.com/v2","kind":"PerconaPGCluster","metadata":{"annotations":{},"labels":{"e2e":"pg-tde-wal-encrypt"},"name":"pg-tde-wal-encrypt","namespace":"kuttl-test-tight-lacewing"},"spec":{"backups":{"pgbackrest":{"image":"docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18","manual":{"options":["--type=full"],"repoName":"repo1"},"repoHost":{"affinity":{"podAntiAffinity":{"preferredDuringSchedulingIgnoredDuringExecution":[{"podAffinityTerm":{"labelSelector":{"matchLabels":{"postgres-operator.crunchydata.com/data":"pgbackrest"}},"topologyKey":"kubernetes.io/hostname"},"weight":1}]}}},"repos":[{"name":"repo1","schedules":{"full":"0 0 * * 6"},"volume":{"volumeClaimSpec":{"accessModes":["ReadWriteOnce"],"resources":{"requests":{"storage":"1Gi"}}}}}]}},"crVersion":"3.1.0","extensions":{"pg_tde":{"enabled":true,"vault":{"caSecret":{"key":"ca.crt","name":"vault-secret"},"host":"https://vault-service.vault-service.svc:8200","mountPath":"tde","tokenSecret":{"key":"token","name":"vault-secret"}},"walEncryption":true}},"image":"docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres","imagePullPolicy":"Always","initContainer":{"image":"docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606"},"instances":[{"affinity":{"podAntiAffinity":{"preferredDuringSchedulingIgnoredDuringExecution":[{"podAffinityTerm":{"labelSelector":{"matchLabels":{"postgres-operator.crunchydata.com/data":"postgres"}},"topologyKey":"kubernetes.io/hostname"},"weight":1}]}},"dataVolumeClaimSpec":{"accessModes":["ReadWriteOnce"],"resources":{"requests":{"storage":"1Gi"}}},"name":"instance1","replicas":3}],"logcollector":{"enabled":true,"image":"docker.io/perconalab/fluentbit:main-logcollector"},"pmm":{"customClusterName":"pg-tde-wal-encrypt-pmm-custom-name","enabled":false,"image":"docker.io/perconalab/pmm-client:3-dev-latest","postgresParams":"--environment=dev-postgres","secret":"pg-tde-wal-encrypt-pmm-secret","serverHost":"monitoring-service"},"postgresVersion":18,"proxy":{"pgBouncer":{"affinity":{"podAntiAffinity":{"preferredDuringSchedulingIgnoredDuringExecution":[{"podAffinityTerm":{"labelSelector":{"matchLabels":{"postgres-operator.crunchydata.com/role":"pgbouncer"}},"topologyKey":"kubernetes.io/hostname"},"weight":1}]}},"image":"docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18","replicas":3}},"users":[{"name":"postgres","password":{"type":"AlphaNumeric"}},{"name":"pg-tde-wal-encrypt","password":{"type":"AlphaNumeric"}}]}} + pgv2.percona.com/patroni-version: 4.1.5 + finalizers: + - internal.percona.com/stop-watchers + labels: + e2e: pg-tde-wal-encrypt + managedFields: '[... elided field over 10 lines long ...]' name: pg-tde-wal-encrypt namespace: kuttl-test-tight-lacewing +spec: '[... elided field over 10 lines long ...]' status: - state: ready + conditions: '[... elided field over 10 lines long ...]' + host: pg-tde-wal-encrypt-pgbouncer.kuttl-test-tight-lacewing.svc + installedCustomExtensions: [] + observedGeneration: 2 + patroni: + status: + systemIdentifier: "7680186637868728483" + version: 4.1.5 + patroniVersion: 4.1.5 + pgbackrest: '[... elided field over 10 lines long ...]' + pgbouncer: + ready: 3 + size: 3 + postgres: '[... elided field over 10 lines long ...]' + state: initializing case.go:330: resource PerconaPGCluster:kuttl-test-tight-lacewing/pg-tde-wal-encrypt: .status.state: value mismatch, expected: ready != actual: initializing case.go:330: command "pgversion=$(kubectl -n ${NAMESPACE} get pg pg-tde-wal-encrypt -o js..." exceeded 1 sec timeout, context deadline exceeded logger.go:42: 13:31:50 | pg-tde-wal-encrypt | pg-tde-wal-encrypt events from ns kuttl-test-tight-lacewing: logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:24:47 +0000 UTC Normal Pod pg-client-d7c7bb45b-68fg6 Scheduled Successfully assigned kuttl-test-tight-lacewing/pg-client-d7c7bb45b-68fg6 to gke-jen-pg-1776-9e498660-default-pool-aadb21d6-prsf default-scheduler logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:24:47 +0000 UTC Normal ReplicaSet.apps pg-client-d7c7bb45b SuccessfulCreate Created pod: pg-client-d7c7bb45b-68fg6 replicaset-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:24:47 +0000 UTC Normal Deployment.apps pg-client ScalingReplicaSet Scaled up replica set pg-client-d7c7bb45b from 0 to 1 deployment-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:24:48 +0000 UTC Normal Pod pg-client-d7c7bb45b-68fg6.spec.containers{pg-client} Pulling Pulling image "perconalab/percona-distribution-postgresql:16" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:25:05 +0000 UTC Normal Pod pg-client-d7c7bb45b-68fg6.spec.containers{pg-client} Pulled Successfully pulled image "perconalab/percona-distribution-postgresql:16" in 16.892s (16.892s including waiting). Image size: 445181537 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:25:05 +0000 UTC Normal Pod pg-client-d7c7bb45b-68fg6.spec.containers{pg-client} Created Created container: pg-client kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:25:05 +0000 UTC Normal Pod pg-client-d7c7bb45b-68fg6.spec.containers{pg-client} Started Started container pg-client kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:17 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-cluster-ca-cert Issuing Issuing certificate as Secret does not exist cert-manager-certificates-trigger logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:18 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-cluster-ca-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-venafi logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:18 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-cluster-ca-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-vault logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:18 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-cluster-ca-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-acme logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:18 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-cluster-ca-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-selfsigned logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:18 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-cluster-ca-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:18 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-cluster-ca-cert-1 cert-manager.io Certificate request has been approved by cert-manager.io cert-manager-certificaterequests-approver logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:18 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-cluster-ca-cert-1 CertificateIssued Certificate fetched from issuer successfully cert-manager-certificaterequests-issuer-selfsigned logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:18 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-cluster-ca-cert Generated Stored new private key in temporary Secret resource "pg-tde-wal-encrypt-cluster-ca-cert-gf6pt" cert-manager-certificates-key-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:18 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-cluster-ca-cert Requested Created new CertificateRequest resource "pg-tde-wal-encrypt-cluster-ca-cert-1" cert-manager-certificates-request-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:19 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-cluster-ca-cert Issuing The certificate has been successfully issued cert-manager-certificates-issuing logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:19 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-replication-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-venafi logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:19 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-replication-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-acme logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:19 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-replication-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-selfsigned logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:19 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-replication-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-vault logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:19 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-replication-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:19 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-replication-cert-1 cert-manager.io Certificate request has been approved by cert-manager.io cert-manager-certificaterequests-approver logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:19 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-replication-cert-1 IssuerNotFound Referenced "Issuer" not found: issuer.cert-manager.io "pg-tde-wal-encrypt-tls-issuer" not found cert-manager-certificaterequests-issuer-vault logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:19 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-replication-cert-1 IssuerNotFound Referenced "Issuer" not found: issuer.cert-manager.io "pg-tde-wal-encrypt-tls-issuer" not found cert-manager-certificaterequests-issuer-selfsigned logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:19 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-replication-cert-1 IssuerNotFound Referenced "Issuer" not found: issuer.cert-manager.io "pg-tde-wal-encrypt-tls-issuer" not found cert-manager-certificaterequests-issuer-venafi logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:19 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-replication-cert-1 IssuerNotFound Referenced "Issuer" not found: issuer.cert-manager.io "pg-tde-wal-encrypt-tls-issuer" not found cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:19 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-replication-cert-1 IssuerNotFound Referenced "Issuer" not found: issuer.cert-manager.io "pg-tde-wal-encrypt-tls-issuer" not found cert-manager-certificaterequests-issuer-acme logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:19 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-replication-cert Issuing Issuing certificate as Secret does not exist cert-manager-certificates-trigger logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:19 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-replication-cert Generated Stored new private key in temporary Secret resource "pg-tde-wal-encrypt-replication-cert-4nbnr" cert-manager-certificates-key-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:19 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-replication-cert Requested Created new CertificateRequest resource "pg-tde-wal-encrypt-replication-cert-1" cert-manager-certificates-request-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:20 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-cluster-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-vault logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:20 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-cluster-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-selfsigned logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:20 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-cluster-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-venafi logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:20 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-cluster-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-acme logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:20 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-cluster-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:20 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-cluster-cert-1 cert-manager.io Certificate request has been approved by cert-manager.io cert-manager-certificaterequests-approver logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:20 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-cluster-cert-1 CertificateIssued Certificate fetched from issuer successfully cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:20 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-cluster-cert Issuing Issuing certificate as Secret does not exist cert-manager-certificates-trigger logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:20 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-cluster-cert Generated Stored new private key in temporary Secret resource "pg-tde-wal-encrypt-cluster-cert-5cslw" cert-manager-certificates-key-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:20 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-cluster-cert Requested Created new CertificateRequest resource "pg-tde-wal-encrypt-cluster-cert-1" cert-manager-certificates-request-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:20 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-instance1-8sds-cert Issuing Issuing certificate as Secret does not exist cert-manager-certificates-trigger logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:20 +0000 UTC Normal PersistentVolumeClaim pg-tde-wal-encrypt-instance1-8sds-pgdata WaitForFirstConsumer waiting for first consumer to be created before binding persistentvolume-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:20 +0000 UTC Normal StatefulSet.apps pg-tde-wal-encrypt-instance1-8sds SuccessfulCreate create Pod pg-tde-wal-encrypt-instance1-8sds-0 in StatefulSet pg-tde-wal-encrypt-instance1-8sds successful statefulset-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:20 +0000 UTC Normal PersistentVolumeClaim pg-tde-wal-encrypt-instance1-wsmn-pgdata WaitForFirstConsumer waiting for first consumer to be created before binding persistentvolume-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:20 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-replication-cert-1 CertificateIssued Certificate fetched from issuer successfully cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:20 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-replication-cert Issuing The certificate has been successfully issued cert-manager-certificates-issuing logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:20 +0000 UTC Normal Issuer.cert-manager.io pg-tde-wal-encrypt-tls-issuer KeyPairVerified Signing CA verified cert-manager-issuers logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:21 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-8sds-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-vault logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:21 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-8sds-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-acme logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:21 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-8sds-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-selfsigned logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:21 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-instance1-8sds-cert Generated Stored new private key in temporary Secret resource "pg-tde-wal-encrypt-instance1-8sds-cert-s9j66" cert-manager-certificates-key-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:21 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-instance1-8sds-cert Requested Created new CertificateRequest resource "pg-tde-wal-encrypt-instance1-8sds-cert-1" cert-manager-certificates-request-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:21 +0000 UTC Normal PersistentVolumeClaim pg-tde-wal-encrypt-instance1-8sds-pgdata ExternalProvisioning Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered. persistentvolume-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:21 +0000 UTC Normal PersistentVolumeClaim pg-tde-wal-encrypt-instance1-8sds-pgdata Provisioning External provisioner is provisioning volume for claim "kuttl-test-tight-lacewing/pg-tde-wal-encrypt-instance1-8sds-pgdata" pd.csi.storage.gke.io_gke-b03b835ebf314754a88d-4b36-c1ff-vm_58cdf8a8-3a55-46f8-b79d-aa4fed8a4f1f logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:21 +0000 UTC Normal PersistentVolumeClaim pg-tde-wal-encrypt-instance1-rgts-pgdata WaitForFirstConsumer waiting for first consumer to be created before binding persistentvolume-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:21 +0000 UTC Normal StatefulSet.apps pg-tde-wal-encrypt-instance1-rgts SuccessfulCreate create Pod pg-tde-wal-encrypt-instance1-rgts-0 in StatefulSet pg-tde-wal-encrypt-instance1-rgts successful statefulset-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:21 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-instance1-wsmn-cert Issuing Issuing certificate as Secret does not exist cert-manager-certificates-trigger logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:21 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-instance1-wsmn-cert Generated Stored new private key in temporary Secret resource "pg-tde-wal-encrypt-instance1-wsmn-cert-sfbnp" cert-manager-certificates-key-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:21 +0000 UTC Normal PersistentVolumeClaim pg-tde-wal-encrypt-instance1-wsmn-pgdata ExternalProvisioning Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered. persistentvolume-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:21 +0000 UTC Normal PersistentVolumeClaim pg-tde-wal-encrypt-instance1-wsmn-pgdata Provisioning External provisioner is provisioning volume for claim "kuttl-test-tight-lacewing/pg-tde-wal-encrypt-instance1-wsmn-pgdata" pd.csi.storage.gke.io_gke-b03b835ebf314754a88d-4b36-c1ff-vm_58cdf8a8-3a55-46f8-b79d-aa4fed8a4f1f logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:21 +0000 UTC Normal StatefulSet.apps pg-tde-wal-encrypt-instance1-wsmn SuccessfulCreate create Pod pg-tde-wal-encrypt-instance1-wsmn-0 in StatefulSet pg-tde-wal-encrypt-instance1-wsmn successful statefulset-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:22 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-cluster-cert Issuing The certificate has been successfully issued cert-manager-certificates-issuing logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:22 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-8sds-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-venafi logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:22 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-8sds-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:22 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-8sds-cert-1 cert-manager.io Certificate request has been approved by cert-manager.io cert-manager-certificaterequests-approver logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:22 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-8sds-cert-1 CertificateIssued Certificate fetched from issuer successfully cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:22 +0000 UTC Normal PersistentVolumeClaim pg-tde-wal-encrypt-instance1-8sds-pgdata ProvisioningSucceeded Successfully provisioned volume pvc-30870c5b-3eea-406c-a37f-2cd32d747512 pd.csi.storage.gke.io_gke-b03b835ebf314754a88d-4b36-c1ff-vm_58cdf8a8-3a55-46f8-b79d-aa4fed8a4f1f logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:22 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-instance1-rgts-cert Issuing Issuing certificate as Secret does not exist cert-manager-certificates-trigger logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:22 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-instance1-rgts-cert Generated Stored new private key in temporary Secret resource "pg-tde-wal-encrypt-instance1-rgts-cert-q5tff" cert-manager-certificates-key-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:22 +0000 UTC Normal PersistentVolumeClaim pg-tde-wal-encrypt-instance1-rgts-pgdata ExternalProvisioning Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered. persistentvolume-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:22 +0000 UTC Normal PersistentVolumeClaim pg-tde-wal-encrypt-instance1-rgts-pgdata Provisioning External provisioner is provisioning volume for claim "kuttl-test-tight-lacewing/pg-tde-wal-encrypt-instance1-rgts-pgdata" pd.csi.storage.gke.io_gke-b03b835ebf314754a88d-4b36-c1ff-vm_58cdf8a8-3a55-46f8-b79d-aa4fed8a4f1f logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:22 +0000 UTC Warning Pod pg-tde-wal-encrypt-repo-host-0 FailedScheduling 0/3 nodes are available: persistentvolumeclaim "pg-tde-wal-encrypt-repo1" not found. not found default-scheduler logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:22 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0 NotTriggerScaleUp Pod didn't trigger scale-up: cluster-autoscaler logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:22 +0000 UTC Normal StatefulSet.apps pg-tde-wal-encrypt-repo-host SuccessfulCreate create Pod pg-tde-wal-encrypt-repo-host-0 in StatefulSet pg-tde-wal-encrypt-repo-host successful statefulset-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:22 +0000 UTC Normal PersistentVolumeClaim pg-tde-wal-encrypt-repo1 WaitForPodScheduled waiting for pod pg-tde-wal-encrypt-repo-host-0 to be scheduled persistentvolume-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:22 +0000 UTC Normal PersistentVolumeClaim pg-tde-wal-encrypt-repo1 ExternalProvisioning Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered. persistentvolume-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:22 +0000 UTC Normal PersistentVolumeClaim pg-tde-wal-encrypt-repo1 Provisioning External provisioner is provisioning volume for claim "kuttl-test-tight-lacewing/pg-tde-wal-encrypt-repo1" pd.csi.storage.gke.io_gke-b03b835ebf314754a88d-4b36-c1ff-vm_58cdf8a8-3a55-46f8-b79d-aa4fed8a4f1f logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:22 +0000 UTC Normal PostgresCluster.upstream.pgv2.percona.com pg-tde-wal-encrypt RepoHostCreated created pgBackRest repository host StatefulSet/pg-tde-wal-encrypt-repo-host postgrescluster-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0 Scheduled Successfully assigned kuttl-test-tight-lacewing/pg-tde-wal-encrypt-instance1-8sds-0 to gke-jen-pg-1776-9e498660-default-pool-aadb21d6-swb0 default-scheduler logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Warning Pod pg-tde-wal-encrypt-instance1-8sds-0 FailedMount MountVolume.SetUp failed for volume "pgbackrest-server" : references non-existent secret key: pgbackrest-server.crt kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Warning Pod pg-tde-wal-encrypt-instance1-8sds-0 FailedMount MountVolume.SetUp failed for volume "patroni-config" : references non-existent secret key: patroni.ca-roots kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-wsmn-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-wsmn-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-venafi logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-wsmn-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-acme logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-wsmn-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-vault logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-wsmn-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-selfsigned logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-wsmn-cert-1 cert-manager.io Certificate request has been approved by cert-manager.io cert-manager-certificaterequests-approver logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-instance1-wsmn-cert Requested Created new CertificateRequest resource "pg-tde-wal-encrypt-instance1-wsmn-cert-1" cert-manager-certificates-request-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-pgbackrest-client-cert Issuing Issuing certificate as Secret does not exist cert-manager-certificates-trigger logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-dg8bd Scheduled Successfully assigned kuttl-test-tight-lacewing/pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-dg8bd to gke-jen-pg-1776-9e498660-default-pool-aadb21d6-7xp8 default-scheduler logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x Scheduled Successfully assigned kuttl-test-tight-lacewing/pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x to gke-jen-pg-1776-9e498660-default-pool-aadb21d6-prsf default-scheduler logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x.spec.initContainers{pgbouncer-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-znkhn Scheduled Successfully assigned kuttl-test-tight-lacewing/pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-znkhn to gke-jen-pg-1776-9e498660-default-pool-aadb21d6-swb0 default-scheduler logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal ReplicaSet.apps pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc SuccessfulCreate Created pod: pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x replicaset-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal ReplicaSet.apps pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc SuccessfulCreate Created pod: pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-znkhn replicaset-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal ReplicaSet.apps pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc SuccessfulCreate Created pod: pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-dg8bd replicaset-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal PodDisruptionBudget.policy pg-tde-wal-encrypt-pgbouncer NoPods No matching pods found controllermanager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:23 +0000 UTC Normal Deployment.apps pg-tde-wal-encrypt-pgbouncer ScalingReplicaSet Scaled up replica set pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc from 0 to 3 deployment-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-instance1-8sds-cert Issuing The certificate has been successfully issued cert-manager-certificates-issuing logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-rgts-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-rgts-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-venafi logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-rgts-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-selfsigned logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-rgts-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-acme logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-rgts-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-vault logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-instance1-rgts-cert Requested Created new CertificateRequest resource "pg-tde-wal-encrypt-instance1-rgts-cert-1" cert-manager-certificates-request-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-wsmn-cert-1 CertificateIssued Certificate fetched from issuer successfully cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal PersistentVolumeClaim pg-tde-wal-encrypt-instance1-wsmn-pgdata ProvisioningSucceeded Successfully provisioned volume pvc-ca84a0dc-b636-4cb2-b1e5-3298df564151 pd.csi.storage.gke.io_gke-b03b835ebf314754a88d-4b36-c1ff-vm_58cdf8a8-3a55-46f8-b79d-aa4fed8a4f1f logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-pgbackrest-client-cert Generated Stored new private key in temporary Secret resource "pg-tde-wal-encrypt-pgbackrest-client-cert-cphx8" cert-manager-certificates-key-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-pgbackrest-repo-cert Issuing Issuing certificate as Secret does not exist cert-manager-certificates-trigger logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-dg8bd.spec.initContainers{pgbouncer-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x.spec.initContainers{pgbouncer-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" in 135ms (135ms including waiting). Image size: 86014413 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x.spec.initContainers{pgbouncer-init} Created Created container: pgbouncer-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x.spec.initContainers{pgbouncer-init} Started Started container pgbouncer-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x.spec.containers{pgbouncer} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-znkhn.spec.initContainers{pgbouncer-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-znkhn.spec.initContainers{pgbouncer-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" in 191ms (191ms including waiting). Image size: 86014413 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-znkhn.spec.initContainers{pgbouncer-init} Created Created container: pgbouncer-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:24 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-znkhn.spec.initContainers{pgbouncer-init} Started Started container pgbouncer-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-rgts-cert-1 cert-manager.io Certificate request has been approved by cert-manager.io cert-manager-certificaterequests-approver logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-instance1-rgts-cert-1 CertificateIssued Certificate fetched from issuer successfully cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Normal PersistentVolumeClaim pg-tde-wal-encrypt-instance1-rgts-pgdata ProvisioningSucceeded Successfully provisioned volume pvc-54ffb288-9bdc-4824-ba15-0fe82dc258a5 pd.csi.storage.gke.io_gke-b03b835ebf314754a88d-4b36-c1ff-vm_58cdf8a8-3a55-46f8-b79d-aa4fed8a4f1f logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0 Scheduled Successfully assigned kuttl-test-tight-lacewing/pg-tde-wal-encrypt-instance1-wsmn-0 to gke-jen-pg-1776-9e498660-default-pool-aadb21d6-prsf default-scheduler logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Warning Pod pg-tde-wal-encrypt-instance1-wsmn-0 FailedMount MountVolume.SetUp failed for volume "pgbackrest-server" : references non-existent secret key: pgbackrest-server.crt kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-instance1-wsmn-cert Issuing The certificate has been successfully issued cert-manager-certificates-issuing logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-pgbackrest-repo-cert Generated Stored new private key in temporary Secret resource "pg-tde-wal-encrypt-pgbackrest-repo-cert-dsncw" cert-manager-certificates-key-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-znkhn.spec.containers{pgbouncer} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-znkhn.spec.containers{pgbouncer} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 127ms (127ms including waiting). Image size: 84604146 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-znkhn.spec.containers{pgbouncer} Created Created container: pgbouncer kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-znkhn.spec.containers{pgbouncer} Started Started container pgbouncer kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-znkhn.spec.containers{pgbouncer-config} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-znkhn.spec.containers{pgbouncer-config} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 136ms (136ms including waiting). Image size: 84604146 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-znkhn.spec.containers{pgbouncer-config} Created Created container: pgbouncer-config kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-pgbouncer-cert Issuing Issuing certificate as Secret does not exist cert-manager-certificates-trigger logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-pgbouncer-cert Generated Stored new private key in temporary Secret resource "pg-tde-wal-encrypt-pgbouncer-cert-w7nlf" cert-manager-certificates-key-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0 Scheduled Successfully assigned kuttl-test-tight-lacewing/pg-tde-wal-encrypt-repo-host-0 to gke-jen-pg-1776-9e498660-default-pool-aadb21d6-7xp8 default-scheduler logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:25 +0000 UTC Normal PersistentVolumeClaim pg-tde-wal-encrypt-repo1 ProvisioningSucceeded Successfully provisioned volume pvc-34cf5f8d-021c-48d6-999b-a70bef4a1804 pd.csi.storage.gke.io_gke-b03b835ebf314754a88d-4b36-c1ff-vm_58cdf8a8-3a55-46f8-b79d-aa4fed8a4f1f logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:26 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0 Scheduled Successfully assigned kuttl-test-tight-lacewing/pg-tde-wal-encrypt-instance1-rgts-0 to gke-jen-pg-1776-9e498660-default-pool-aadb21d6-7xp8 default-scheduler logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:26 +0000 UTC Warning Pod pg-tde-wal-encrypt-instance1-rgts-0 FailedMount MountVolume.SetUp failed for volume "patroni-config" : references non-existent secret key: patroni.ca-roots kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:26 +0000 UTC Warning Pod pg-tde-wal-encrypt-instance1-rgts-0 FailedMount MountVolume.SetUp failed for volume "pgbackrest-server" : references non-existent secret key: pgbackrest-server.crt kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:26 +0000 UTC Warning Pod pg-tde-wal-encrypt-instance1-wsmn-0 FailedMount MountVolume.SetUp failed for volume "patroni-config" : references non-existent secret key: patroni.ca-roots kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:26 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbackrest-client-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-selfsigned logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:26 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbackrest-client-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-venafi logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:26 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbackrest-client-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:26 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbackrest-client-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-acme logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:26 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbackrest-client-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-vault logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:26 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbackrest-client-cert-1 cert-manager.io Certificate request has been approved by cert-manager.io cert-manager-certificaterequests-approver logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:26 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-pgbackrest-client-cert Requested Created new CertificateRequest resource "pg-tde-wal-encrypt-pgbackrest-client-cert-1" cert-manager-certificates-request-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:26 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbackrest-repo-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-venafi logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:26 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbackrest-repo-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-acme logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:26 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-pgbackrest-repo-cert Requested Created new CertificateRequest resource "pg-tde-wal-encrypt-pgbackrest-repo-cert-1" cert-manager-certificates-request-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:26 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-znkhn.spec.containers{pgbouncer-config} Started Started container pgbouncer-config kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:27 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-instance1-rgts-cert Issuing The certificate has been successfully issued cert-manager-certificates-issuing logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:27 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbackrest-client-cert-1 CertificateIssued Certificate fetched from issuer successfully cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:27 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbackrest-repo-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:27 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbackrest-repo-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-selfsigned logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:27 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbackrest-repo-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-vault logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:27 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbackrest-repo-cert-1 cert-manager.io Certificate request has been approved by cert-manager.io cert-manager-certificaterequests-approver logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:27 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-dg8bd.spec.initContainers{pgbouncer-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" in 3.64s (3.64s including waiting). Image size: 86014413 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:27 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-dg8bd.spec.initContainers{pgbouncer-init} Created Created container: pgbouncer-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:27 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-dg8bd.spec.initContainers{pgbouncer-init} Started Started container pgbouncer-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:27 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbouncer-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-selfsigned logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:27 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbouncer-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-venafi logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:27 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbouncer-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-vault logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:27 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbouncer-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-acme logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:27 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-pgbouncer-cert Requested Created new CertificateRequest resource "pg-tde-wal-encrypt-pgbouncer-cert-1" cert-manager-certificates-request-manager logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:28 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-pgbackrest-client-cert Issuing The certificate has been successfully issued cert-manager-certificates-issuing logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:28 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbackrest-repo-cert-1 CertificateIssued Certificate fetched from issuer successfully cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:28 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbouncer-cert-1 WaitingForApproval Not signing CertificateRequest until it is Approved cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:28 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbouncer-cert-1 cert-manager.io Certificate request has been approved by cert-manager.io cert-manager-certificaterequests-approver logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:29 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0 SuccessfulAttachVolume AttachVolume.Attach succeeded for volume "pvc-30870c5b-3eea-406c-a37f-2cd32d747512" attachdetach-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:29 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-pgbackrest-repo-cert Issuing The certificate has been successfully issued cert-manager-certificates-issuing logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:29 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x.spec.containers{pgbouncer} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 4.387s (4.387s including waiting). Image size: 84604146 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:29 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x.spec.containers{pgbouncer} Created Created container: pgbouncer kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:29 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x.spec.containers{pgbouncer} Started Started container pgbouncer kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:29 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x.spec.containers{pgbouncer-config} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:29 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x.spec.containers{pgbouncer-config} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 95ms (95ms including waiting). Image size: 84604146 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:29 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x.spec.containers{pgbouncer-config} Created Created container: pgbouncer-config kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:29 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x.spec.containers{pgbouncer-config} Started Started container pgbouncer-config kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:29 +0000 UTC Normal CertificateRequest.cert-manager.io pg-tde-wal-encrypt-pgbouncer-cert-1 CertificateIssued Certificate fetched from issuer successfully cert-manager-certificaterequests-issuer-ca logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:29 +0000 UTC Normal Certificate.cert-manager.io pg-tde-wal-encrypt-pgbouncer-cert Issuing The certificate has been successfully issued cert-manager-certificates-issuing logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:30 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-dg8bd.spec.containers{pgbouncer} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:30 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0 SuccessfulAttachVolume AttachVolume.Attach succeeded for volume "pvc-34cf5f8d-021c-48d6-999b-a70bef4a1804" attachdetach-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:31 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0 SuccessfulAttachVolume AttachVolume.Attach succeeded for volume "pvc-ca84a0dc-b636-4cb2-b1e5-3298df564151" attachdetach-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:32 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.initContainers{database-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:32 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.initContainers{database-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" in 186ms (186ms including waiting). Image size: 86014413 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:32 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.initContainers{database-init} Created Created container: database-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:32 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.initContainers{database-init} Started Started container database-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:33 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.initContainers{postgres-startup} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:33 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.initContainers{postgres-startup} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 163ms (163ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:33 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.initContainers{postgres-startup} Created Created container: postgres-startup kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:33 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.initContainers{postgres-startup} Started Started container postgres-startup kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:34 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.initContainers{nss-wrapper-init-logcollector} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:34 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.initContainers{nss-wrapper-init-logcollector} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 160ms (160ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:34 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.initContainers{nss-wrapper-init-logcollector} Created Created container: nss-wrapper-init-logcollector kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:34 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.initContainers{nss-wrapper-init-logcollector} Started Started container nss-wrapper-init-logcollector kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:34 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0 SuccessfulAttachVolume AttachVolume.Attach succeeded for volume "pvc-54ffb288-9bdc-4824-ba15-0fe82dc258a5" attachdetach-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:34 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-dg8bd.spec.containers{pgbouncer} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 4.291s (4.291s including waiting). Image size: 84604146 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:34 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-dg8bd.spec.containers{pgbouncer} Created Created container: pgbouncer kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:34 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-dg8bd.spec.containers{pgbouncer} Started Started container pgbouncer kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:34 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-dg8bd.spec.containers{pgbouncer-config} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:34 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-dg8bd.spec.containers{pgbouncer-config} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 122ms (122ms including waiting). Image size: 84604146 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:34 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-dg8bd.spec.containers{pgbouncer-config} Created Created container: pgbouncer-config kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:34 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-dg8bd.spec.containers{pgbouncer-config} Started Started container pgbouncer-config kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:35 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.initContainers{nss-wrapper-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:35 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.initContainers{nss-wrapper-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 152ms (152ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:35 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.initContainers{nss-wrapper-init} Created Created container: nss-wrapper-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:35 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.initContainers{nss-wrapper-init} Started Started container nss-wrapper-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:36 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.containers{database} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:36 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.containers{database} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 173ms (173ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:36 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.containers{database} Created Created container: database kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:36 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.containers{database} Started Started container database kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:36 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.containers{replication-cert-copy} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:36 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{database-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:36 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{database-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" in 173ms (173ms including waiting). Image size: 86014413 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:36 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{database-init} Created Created container: database-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:36 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{database-init} Started Started container database-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:37 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.containers{replication-cert-copy} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 162ms (162ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:37 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.containers{replication-cert-copy} Created Created container: replication-cert-copy kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:37 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.containers{replication-cert-copy} Started Started container replication-cert-copy kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:37 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.containers{logs} Pulled Container image "docker.io/perconalab/fluentbit:main-logcollector" already present on machine kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:37 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{database-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:37 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{database-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" in 151ms (151ms including waiting). Image size: 86014413 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:37 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{database-init} Created Created container: database-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:37 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{database-init} Started Started container database-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:37 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0.spec.initContainers{pgbackrest-log-dir} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:38 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{postgres-startup} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:39 +0000 UTC Warning Pod pg-tde-wal-encrypt-instance1-8sds-0.spec.containers{database} Unhealthy Readiness probe failed: kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:40 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{postgres-startup} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:44 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0.spec.initContainers{pgbackrest-log-dir} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 7.549s (7.549s including waiting). Image size: 122685827 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:44 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0.spec.initContainers{pgbackrest-log-dir} Created Created container: pgbackrest-log-dir kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:44 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0.spec.initContainers{pgbackrest-log-dir} Started Started container pgbackrest-log-dir kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:47 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0.spec.initContainers{nss-wrapper-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:47 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0.spec.initContainers{nss-wrapper-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 90ms (90ms including waiting). Image size: 122685827 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:47 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0.spec.initContainers{nss-wrapper-init} Created Created container: nss-wrapper-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:47 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0.spec.initContainers{nss-wrapper-init} Started Started container nss-wrapper-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:49 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0.spec.containers{pgbackrest} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:49 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0.spec.containers{pgbackrest} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 156ms (156ms including waiting). Image size: 122685827 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:49 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0.spec.containers{pgbackrest} Created Created container: pgbackrest kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:49 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0.spec.containers{pgbackrest} Started Started container pgbackrest kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:49 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0.spec.containers{pgbackrest-config} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:49 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0.spec.containers{pgbackrest-config} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 104ms (104ms including waiting). Image size: 122685827 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:49 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0.spec.containers{pgbackrest-config} Created Created container: pgbackrest-config kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:49 +0000 UTC Normal Pod pg-tde-wal-encrypt-repo-host-0.spec.containers{pgbackrest-config} Started Started container pgbackrest-config kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:50 +0000 UTC Normal PostgresCluster.upstream.pgv2.percona.com pg-tde-wal-encrypt StanzasCreated pgBackRest stanza creation completed successfully postgrescluster-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:53 +0000 UTC Normal Pod pg-tde-wal-encrypt-backup-55qm-dhjrt Scheduled Successfully assigned kuttl-test-tight-lacewing/pg-tde-wal-encrypt-backup-55qm-dhjrt to gke-jen-pg-1776-9e498660-default-pool-aadb21d6-prsf default-scheduler logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:53 +0000 UTC Normal Job.batch pg-tde-wal-encrypt-backup-55qm SuccessfulCreate Created pod: pg-tde-wal-encrypt-backup-55qm-dhjrt job-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:54 +0000 UTC Normal Pod pg-tde-wal-encrypt-backup-55qm-dhjrt.spec.initContainers{pgbackrest-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:54 +0000 UTC Normal Pod pg-tde-wal-encrypt-backup-55qm-dhjrt.spec.initContainers{pgbackrest-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" in 196ms (196ms including waiting). Image size: 86014413 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:54 +0000 UTC Normal Pod pg-tde-wal-encrypt-backup-55qm-dhjrt.spec.initContainers{pgbackrest-init} Created Created container: pgbackrest-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:54 +0000 UTC Normal Pod pg-tde-wal-encrypt-backup-55qm-dhjrt.spec.initContainers{pgbackrest-init} Started Started container pgbackrest-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:54 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{postgres-startup} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 16.062s (16.062s including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:54 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{postgres-startup} Created Created container: postgres-startup kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:54 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{postgres-startup} Started Started container postgres-startup kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:57 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{postgres-startup} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 17.482s (17.482s including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:57 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{postgres-startup} Created Created container: postgres-startup kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:26:57 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{postgres-startup} Started Started container postgres-startup kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:02 +0000 UTC Normal Pod pg-tde-wal-encrypt-backup-55qm-dhjrt.spec.containers{pgbackrest} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:02 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{nss-wrapper-init-logcollector} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:03 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{nss-wrapper-init-logcollector} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:03 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{nss-wrapper-init-logcollector} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 105ms (105ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:03 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{nss-wrapper-init-logcollector} Created Created container: nss-wrapper-init-logcollector kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:03 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{nss-wrapper-init-logcollector} Started Started container nss-wrapper-init-logcollector kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:03 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{nss-wrapper-init-logcollector} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 213ms (213ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:03 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{nss-wrapper-init-logcollector} Created Created container: nss-wrapper-init-logcollector kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:03 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{nss-wrapper-init-logcollector} Started Started container nss-wrapper-init-logcollector kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:03 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{nss-wrapper-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:04 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{nss-wrapper-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:04 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{nss-wrapper-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 126ms (126ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:04 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{nss-wrapper-init} Created Created container: nss-wrapper-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:04 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{nss-wrapper-init} Started Started container nss-wrapper-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:04 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{nss-wrapper-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 268ms (268ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:04 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{nss-wrapper-init} Created Created container: nss-wrapper-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:04 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{nss-wrapper-init} Started Started container nss-wrapper-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:04 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{database} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:04 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{database} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 110ms (110ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:04 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{database} Created Created container: database kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:05 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{database} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:05 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{database} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 116ms (116ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:05 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{database} Created Created container: database kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:05 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{database} Started Started container database kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:05 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{replication-cert-copy} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:05 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{replication-cert-copy} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 98ms (98ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:05 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{replication-cert-copy} Created Created container: replication-cert-copy kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:05 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{replication-cert-copy} Started Started container replication-cert-copy kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:05 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{database} Started Started container database kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:05 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{replication-cert-copy} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:05 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{replication-cert-copy} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 149ms (149ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:05 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{replication-cert-copy} Created Created container: replication-cert-copy kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:05 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{replication-cert-copy} Started Started container replication-cert-copy kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:05 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{logs} Pulling Pulling image "docker.io/perconalab/fluentbit:main-logcollector" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:06 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{logs} Pulling Pulling image "docker.io/perconalab/fluentbit:main-logcollector" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:07 +0000 UTC Normal Pod pg-tde-wal-encrypt-backup-55qm-dhjrt.spec.containers{pgbackrest} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 4.958s (4.958s including waiting). Image size: 122685827 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:07 +0000 UTC Normal Pod pg-tde-wal-encrypt-backup-55qm-dhjrt.spec.containers{pgbackrest} Created Created container: pgbackrest kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:07 +0000 UTC Normal Pod pg-tde-wal-encrypt-backup-55qm-dhjrt.spec.containers{pgbackrest} Started Started container pgbackrest kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:14 +0000 UTC Warning Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{database} Unhealthy Readiness probe failed: kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:14 +0000 UTC Warning Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{database} Unhealthy Readiness probe failed: kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:43 +0000 UTC Normal Job.batch pg-tde-wal-encrypt-backup-55qm Completed Job completed job-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:27:59 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0 Scheduled Successfully assigned kuttl-test-tight-lacewing/pg-tde-wal-encrypt-instance1-rgts-0 to gke-jen-pg-1776-9e498660-default-pool-aadb21d6-7xp8 default-scheduler logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:09 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{database-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:09 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{database-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" in 107ms (107ms including waiting). Image size: 86014413 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:09 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{database-init} Created Created container: database-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:10 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{database-init} Started Started container database-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:10 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{postgres-startup} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:10 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{postgres-startup} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 188ms (188ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:10 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{postgres-startup} Created Created container: postgres-startup kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:11 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{postgres-startup} Started Started container postgres-startup kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:11 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{nss-wrapper-init-logcollector} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:11 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{nss-wrapper-init-logcollector} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 101ms (101ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:11 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{nss-wrapper-init-logcollector} Created Created container: nss-wrapper-init-logcollector kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:11 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{nss-wrapper-init-logcollector} Started Started container nss-wrapper-init-logcollector kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:12 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{nss-wrapper-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:12 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{nss-wrapper-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 125ms (125ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:12 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{nss-wrapper-init} Created Created container: nss-wrapper-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:13 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.initContainers{nss-wrapper-init} Started Started container nss-wrapper-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:13 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{database} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:13 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{database} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 123ms (123ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:13 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{database} Created Created container: database kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:14 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{database} Started Started container database kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:14 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{replication-cert-copy} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:14 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{replication-cert-copy} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 108ms (109ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:14 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{replication-cert-copy} Created Created container: replication-cert-copy kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:14 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{replication-cert-copy} Started Started container replication-cert-copy kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:28:14 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-rgts-0.spec.containers{logs} Pulled Container image "docker.io/perconalab/fluentbit:main-logcollector" already present on machine kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:19 +0000 UTC Normal Pod pg-client-d7c7bb45b-68fg6.spec.containers{pg-client} Killing Stopping container pg-client kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:19 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x.spec.containers{pgbouncer} Killing Stopping container pgbouncer kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:19 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x.spec.containers{pgbouncer-config} Killing Stopping container pgbouncer-config kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:20 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0 Scheduled Successfully assigned kuttl-test-tight-lacewing/pg-tde-wal-encrypt-instance1-wsmn-0 to gke-jen-pg-1776-9e498660-default-pool-aadb21d6-swb0 default-scheduler logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:20 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-4zq7p Scheduled Successfully assigned kuttl-test-tight-lacewing/pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-4zq7p to gke-jen-pg-1776-9e498660-default-pool-aadb21d6-7xp8 default-scheduler logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:20 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-4zq7p.spec.initContainers{pgbouncer-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:20 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-4zq7p.spec.initContainers{pgbouncer-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" in 128ms (128ms including waiting). Image size: 86014413 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:20 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-4zq7p.spec.initContainers{pgbouncer-init} Created Created container: pgbouncer-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:20 +0000 UTC Normal ReplicaSet.apps pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc SuccessfulCreate Created pod: pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-4zq7p replicaset-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:21 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-4zq7p.spec.initContainers{pgbouncer-init} Started Started container pgbouncer-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:22 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-4zq7p.spec.containers{pgbouncer} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:22 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-4zq7p.spec.containers{pgbouncer} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 110ms (110ms including waiting). Image size: 84604146 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:22 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-4zq7p.spec.containers{pgbouncer} Created Created container: pgbouncer kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:22 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-4zq7p.spec.containers{pgbouncer} Started Started container pgbouncer kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:22 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-4zq7p.spec.containers{pgbouncer-config} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:22 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-4zq7p.spec.containers{pgbouncer-config} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 96ms (96ms including waiting). Image size: 84604146 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:22 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-4zq7p.spec.containers{pgbouncer-config} Created Created container: pgbouncer-config kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:22 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-4zq7p.spec.containers{pgbouncer-config} Started Started container pgbouncer-config kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:34 +0000 UTC Normal Pod pg-client-d7c7bb45b-zhnvw Scheduled Successfully assigned kuttl-test-tight-lacewing/pg-client-d7c7bb45b-zhnvw to gke-jen-pg-1776-9e498660-default-pool-aadb21d6-7xp8 default-scheduler logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:34 +0000 UTC Normal ReplicaSet.apps pg-client-d7c7bb45b SuccessfulCreate Created pod: pg-client-d7c7bb45b-zhnvw replicaset-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:35 +0000 UTC Normal Pod pg-client-d7c7bb45b-zhnvw.spec.containers{pg-client} Pulling Pulling image "perconalab/percona-distribution-postgresql:16" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:52 +0000 UTC Normal Pod pg-client-d7c7bb45b-zhnvw.spec.containers{pg-client} Pulled Successfully pulled image "perconalab/percona-distribution-postgresql:16" in 17.049s (17.049s including waiting). Image size: 445181537 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:52 +0000 UTC Normal Pod pg-client-d7c7bb45b-zhnvw.spec.containers{pg-client} Created Created container: pg-client kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:30:52 +0000 UTC Normal Pod pg-client-d7c7bb45b-zhnvw.spec.containers{pg-client} Started Started container pg-client kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:13 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0 SuccessfulAttachVolume AttachVolume.Attach succeeded for volume "pvc-ca84a0dc-b636-4cb2-b1e5-3298df564151" attachdetach-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:14 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{database-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:14 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{database-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1776-9e4986606" in 259ms (259ms including waiting). Image size: 86014413 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:14 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{database-init} Created Created container: database-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:15 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{database-init} Started Started container database-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:15 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{postgres-startup} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:15 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{postgres-startup} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 175ms (175ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:16 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{postgres-startup} Created Created container: postgres-startup kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:16 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{postgres-startup} Started Started container postgres-startup kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:16 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{nss-wrapper-init-logcollector} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:16 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{nss-wrapper-init-logcollector} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 161ms (161ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:16 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{nss-wrapper-init-logcollector} Created Created container: nss-wrapper-init-logcollector kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:17 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{nss-wrapper-init-logcollector} Started Started container nss-wrapper-init-logcollector kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:17 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{nss-wrapper-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:17 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{nss-wrapper-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 193ms (193ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:18 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{nss-wrapper-init} Created Created container: nss-wrapper-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:18 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.initContainers{nss-wrapper-init} Started Started container nss-wrapper-init kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:18 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{database} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:18 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{database} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 176ms (176ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:19 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{database} Created Created container: database kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:19 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{database} Started Started container database kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:19 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{replication-cert-copy} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:19 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{replication-cert-copy} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 216ms (216ms including waiting). Image size: 449176984 bytes. kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:19 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{replication-cert-copy} Created Created container: replication-cert-copy kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:19 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{replication-cert-copy} Started Started container replication-cert-copy kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:19 +0000 UTC Normal Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{logs} Pulled Container image "docker.io/perconalab/fluentbit:main-logcollector" already present on machine kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:23 +0000 UTC Warning Pod pg-tde-wal-encrypt-instance1-wsmn-0.spec.containers{database} Unhealthy Readiness probe failed: kubelet logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:49 +0000 UTC Normal Pod pg-client-d7c7bb45b-68fg6 TaintManagerEviction Cancelling deletion of Pod kuttl-test-tight-lacewing/pg-client-d7c7bb45b-68fg6 taint-eviction-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:49 +0000 UTC Normal Pod pg-tde-wal-encrypt-backup-55qm-dhjrt TaintManagerEviction Cancelling deletion of Pod kuttl-test-tight-lacewing/pg-tde-wal-encrypt-backup-55qm-dhjrt taint-eviction-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | 2026-08-31 13:31:49 +0000 UTC Normal Pod pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x TaintManagerEviction Cancelling deletion of Pod kuttl-test-tight-lacewing/pg-tde-wal-encrypt-pgbouncer-6cb4bb8dbc-gt75x taint-eviction-controller logger.go:42: 13:31:50 | pg-tde-wal-encrypt | Deleting namespace "kuttl-test-tight-lacewing" === NAME kuttl harness.go:404: run tests finished harness.go:511: cleaning up harness.go:568: removing temp folder: "" --- FAIL: kuttl (515.76s) --- FAIL: kuttl/harness (0.00s) --- FAIL: kuttl/harness/pg-tde-wal-encrypt (515.02s) FAIL